python3-pillow: CVE_STATUS for CVE-2026-55798

Analysis:
- The vulnerable code is WindowsViewer.get_command() constructing an
  unescaped cmd.exe command from a file path. [1]
- Linux uses UnixViewer, which quotes the path, so this Windows command
  path is not used by the target recipe. [1]
- Hence marking this CVE not applicable for the Linux target.

[1] https://github.com/python-pillow/Pillow/security/advisories/GHSA-4x4j-2g7c-83w6

Signed-off-by: Yogita Urade <yurade@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>

meta-python/recipes-devtools/python/python3-pillow_12.2.0.bb

@@ -70,6 +70,7 @@ RDEPENDS:${PN}-ptest += " \
 "
 
 CVE_PRODUCT = "pillow"
+CVE_STATUS[CVE-2026-55798] = "not-applicable-platform: The CVE affects WindowsViewer/cmd.exe; the Linux target uses UnixViewer"
 
 
 RPROVIDES:${PN} += "python3-imaging"